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ABSTRACT OF THE DISCLOSURE 


A method for controlling user access to distributed resources on a data 
communications network includes receiving a resource request. The request includes a 
rights key credential that includes at least one key to provide access to a resource on the 
data communications network. The rights key credential also includes a resource 
identifier that includes a resource server peer group ID and a randomized K). The 
resource server peer group ID identifies a resource server peer group. The resource 
server peer group includes at least one server that maintains a mapping between a 
randomized ID and the at least one key. The method also includes providing access to 
the resource using the at least one key. 
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